Publié il y a 8 mois
Security Engineer
@ Querentia Inc.
Toronto, Ontario
En bref
Querentia Inc. is hiring a contract Security Engineer (DevSecOps / Cloud) to support a Government of Canada client in delivering secure cloud-based applications. The work covers CI/CD security, automated scanning controls and Security Assessment & Authorization (SA&A) activities, on a remote, full-time exclusive 6-month contract at 37.5 hours per week, with a mandatory Secret or Top-Secret clearance.
Responsabilités :
- Design and implement secure CI/CD pipelines with integrated security controls
- Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security)
- Lead and support SA&A activities for cloud-based applications
- Ensure compliance with Government of Canada security frameworks and standards
- Identify and remediate application and infrastructure vulnerabilities
Résumé des exigences :
- Bachelor's degree or College Diploma in a relevant discipline
- 5+ years in a software development or engineering environment
- Two SA&A completions for cloud applications within the last 5 years (GOC experience required)
- 2+ years implementing automated security scanning within CI/CD pipelines
- Active Secret or Top-Secret clearance (mandatory)
Outils et compétences
Source et dates
Type de source non vérifié · jsonld
- Date publiée par l’employeur
- 2026-03-25
- Première détection par notre source
- 2026-10-26
- Mise à jour du dossier source
- 2026-11-02
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Senior |
| Domaine | Développement logiciel |
| Expérience | 5 an(s) et plus |
| Heures par semaine | 37.5 |
| Déplacements | avion : aucun · route : aucun |
| Milieu de travail | Domicile |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
| Permis et certifications | Secret clearance, Top Secret clearance |
| Formation | Baccalauréat (exigé), Collégial (DEC) (exigé) |
| Domaines d’études | Computer Science, Information Technology, Engineering |
| Cote de sécurité | Secret |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Querentia Inc.
| Champ | Valeur |
|---|---|
| Offres sur Jobsy | 331 |
Job Title: Security Engineer (DevSecOps / Cloud)
Location: Remote
Duration: 6-Month Contract (Full-Time – 37.5 hours/week, Exclusive)
Clearance: Secret or Top-Secret (Mandatory)
Role Overview
We are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.
The ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.
Key Responsibilities
• Design and implement secure CI/CD pipelines with integrated security controls
• Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)
• Lead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications
• Ensure compliance with Government of Canada security frameworks, policies, and standards
• Identify, assess, and remediate application and infrastructure vulnerabilities
• Apply modern security engineering practices across the SDLC
• Collaborate with development and DevOps teams to embed DevSecOps best practices
• Support threat modeling, risk assessments, and security reviews for new and existing systems
Mandatory Requirements
• Bachelor ’ s degree or College Diploma in a relevant discipline
• Minimum 5+ years of experience in a software development / engineering environment
• Strong hands-on experience with CI/CD pipelines and DevSecOps practices
• Proven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )
• Minimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines
• Experience applying modern application security principles to applications released within the past 3 years
• Active Secret or Top-Secret Clearance (Mandatory)
Additional Requirements
• Prior experience working within Government of Canada (GOC) environments
• Strong knowledge of cloud security, risk management, and compliance frameworks
• Ability to commit to a full-time (37.5 hours/week), exclusive contract
• Strong communication and stakeholder collaboration skills
Nice to Have
• Certifications such as CISSP, CISM, CEH, AWS/Azure Security
• Experience with Infrastructure as Code (IaC) and secure configuration management
• Familiarity with containerization and Kubernetes security
• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.